Validation of Guidance Control Software Requirements指导控制软件需求的验证.pptVIP

Validation of Guidance Control Software Requirements Specification for Reliability and Fault-Tolerance Annual Reliability Maintainability Symposium January 30, 2002 Frederick T. Sheldon and Hye Yeon Kim Software Engineering for Dependable Systems (SEDS) Research Laboratory School of Electrical Engineering and Computer Science Washington State University Overview Goal: Show the feasibility of this analysis approach using a industrial strength SRS to ensure: Completeness and Consistency Fault-tolerance Specification Under Study A NASA provided Guidance and Control Software (GCS) development specification for the Viking Mars Lander. Analysis Approach Using Zed to specify the data Using Statecharts : Statemate for dynamical analysis Summary and Future study Introduction Why Requirements Specification? Cost, Time, and Effort Reliable Specification Is Correct Complete, consistent and robust Can the specification be trusted while minimizing the risk of costly errors? How to analyze the specification to prevent the propagation of errors into the downstream activities? Consistency and Completeness Completeness: The lack of ambiguity Incomplete if … … the system behavior is not specified precisely because the required behavior for some events or conditions is omitted or is subject to more than one interpretation. Consistency The Specification is free from conflicting requirements and undesired nondeterminism. Fault Tolerance Faults A fault is a feature of a system that precludes it from operating according to its specification H. Ammar, B. Cukic, C. Fuhrman, and A. Mili, A comparative Analysis of HW and SW fault tolerance: Impact on software reliability engineering, 1999 Fault Tolerance The ability to respond to unexpected system failure (detection and mask/recover) Guidance and Control Software Software Requirements – GCS Dev. Spec. The system was designed to provide software control of the embedded sensors and actuators of the Viking Mars Lander during the termin